Skip to content
OpenAdvisories

Product · Astoundify

Simple Registration for WooCommerce

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Simple Registration for WooCommerce <= 1.5.8 - Cross-Site Request Forgery to Privilege Escalation via Role Request Approval

    The Simple Registration for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.8. This is due to missing nonce validation on the role requests admin page handler in the includes/display-role-…